Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft
File:                     -Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft (raw, json)
Hash identifier:          OJMaTzcEoWsreYDUQXmdelUx/y0Uu/csVJRYg4BEWCs=
Subject key identifier:   4C:89:7A:F6:E5:F6:0A:AB:28:7B:02:38:F9:1F:26:DE:50:C6:AD:E3
Authority key identifier: F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD
Certificate issuer:       /CN=A91B0F3F/serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD
Certificate serial:       0ADF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft
Manifest number:          0ABD
Signing time:             Thu 16 Apr 2026 19:26:06 +0000
Manifest this update:     Thu 16 Apr 2026 19:26:06 +0000
Manifest next update:     Thu 23 Apr 2026 19:26:06 +0000
Files and hashes:         1: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl (hash: gFWSIMA8n4629LUmqZLV/t1HMB6VRCkBIJiUcL+bGsQ=)
                          2: FE84EF96F16211F08FA76A8B5F6F56BC.roa (hash: LswMfaH47y3DaYLf6YvWkUTkv4VF2qVi2QmgGi//KfI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl
                          rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2783 (0xadf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0F3F, serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD
        Validity
            Not Before: Apr 16 19:26:06 2026 GMT
            Not After : Apr 23 19:26:06 2026 GMT
        Subject: CN=69e137ce-371a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c2:cd:11:16:a6:dc:6b:9c:1e:3f:19:80:3e:
                    50:ac:95:b0:92:37:26:32:04:47:6b:2f:48:b6:0a:
                    07:d1:42:c1:f9:27:f3:b4:37:2c:f0:11:f0:8b:5c:
                    f2:29:82:9d:79:69:60:af:87:3c:50:3a:aa:e4:43:
                    0b:cb:9f:5a:d1:69:2a:de:8b:bf:f6:64:85:38:a3:
                    96:4b:ff:8c:98:f5:1b:4c:05:f0:70:b5:65:91:ef:
                    91:91:40:fe:cd:6d:c8:de:50:06:85:fc:17:29:b7:
                    a9:02:ed:8b:e1:1e:8d:87:04:1a:8e:34:c3:bb:7a:
                    ce:e0:42:0c:04:91:85:9a:9e:d0:84:9a:8a:75:4e:
                    85:3e:8f:e2:db:04:72:6e:99:99:5d:30:0d:c9:31:
                    9f:27:fe:53:8c:4d:96:84:86:4b:69:11:18:5f:74:
                    4e:f2:17:7d:c9:02:6e:8e:5d:71:e2:9f:d1:b9:b2:
                    68:19:b8:7e:68:95:9d:73:0f:95:90:56:bb:1c:7a:
                    66:52:1d:ab:c2:e1:b3:d9:8c:c4:b9:15:f1:17:d0:
                    44:51:0f:2d:e6:ca:32:20:0f:0e:a6:9b:c8:09:ee:
                    7f:58:6f:53:76:c0:1f:62:e9:7f:dd:54:74:ae:61:
                    3c:f8:92:5a:ac:d4:33:20:ee:60:23:90:9e:97:dc:
                    55:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:89:7A:F6:E5:F6:0A:AB:28:7B:02:38:F9:1F:26:DE:50:C6:AD:E3
            X509v3 Authority Key Identifier:
                keyid:F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:12:13:40:a5:b2:e9:9d:bb:94:ca:cb:51:91:e3:91:a0:61:
         e2:32:5c:b8:46:78:74:f7:d0:e5:52:a9:de:27:e7:70:a8:03:
         12:1b:a2:7c:5c:42:43:fb:73:60:0f:7e:72:1f:40:14:8a:3b:
         72:d2:69:e9:c5:37:d9:d9:e8:7a:83:f6:de:2c:ff:49:a5:e9:
         b9:a8:65:e4:88:f0:10:09:00:c7:1c:64:a4:f3:f0:fc:ad:b7:
         8d:14:40:f7:4a:7e:a4:14:8f:08:85:cd:1f:66:76:70:7b:60:
         a6:cd:21:12:e8:a6:65:8f:c7:b2:c7:ed:34:59:9e:ee:eb:bc:
         b8:db:aa:41:25:22:25:c6:bf:da:3d:ad:5f:53:6d:a3:1a:8f:
         d7:d0:31:dc:d9:5a:46:22:4a:00:ef:2d:de:f1:ca:48:91:31:
         61:ce:60:4b:21:b4:ce:e5:9e:74:67:7f:ac:e0:96:dd:9b:24:
         19:82:2e:23:0e:b6:36:75:5b:6c:42:86:03:74:4d:f9:86:a5:
         7a:8a:fe:94:d8:5c:9b:b2:28:de:28:03:d2:16:0d:bc:a7:f6:
         0f:28:17:13:99:79:65:e7:73:8a:79:f5:f7:a0:69:15:a3:ec:
         b8:f1:0c:9e:be:f6:e1:c3:fc:71:67:3f:35:78:f9:83:9f:f3:
         f9:f4:02:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:44:06 2026 by rpki-client